medium5.0Public exploit code
CVE-2001-0705
Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL wi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 1C: Arcadia Internet Store 1.0 - Arbitrary File Disclosure2001-06-21 · remote · windows · Verified
Impact
Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL with "dot dot" sequences in the template argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arcadia | Arcadia Internet Store | Version 1.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/192651
- http://www.securityfocus.com/bid/2902
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6737
- http://www.securityfocus.com/archive/1/192651
- http://www.securityfocus.com/bid/2902
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6737